Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/3a4da1f113fc498c38a0220bc87d47bb2bed1e46.roa
File: 3a4da1f113fc498c38a0220bc87d47bb2bed1e46.roa (raw, json)
Hash identifier: 6088IMlaM2uuRxp10Geqj9eqwaUgblQ4ikk7auuK9oo=
Subject key identifier: 36:19:2F:D5:D9:A1:D6:88:AB:D0:9B:EF:13:9C:9F:E9:5D:9B:39:61
Certificate issuer: /CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Certificate serial: 0BE07D
Authority key identifier: 40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/3a4da1f113fc498c38a0220bc87d47bb2bed1e46.roa
Signing time: Fri 29 Sep 2023 15:01:04 +0000
ROA not before: Thu 28 Sep 2023 15:01:04 +0000
ROA not after: Mon 29 Sep 2025 15:01:04 +0000
asID: 272150
IP address blocks: 192.141.20.0/24 maxlen: 24
192.141.22.0/23 maxlen: 24
2803:6020::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 778365 (0xbe07d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463cab8887b80a1beafb23f455d7d8458c8c1c5a
Validity
Not Before: Sep 28 15:01:04 2023 GMT
Not After : Sep 29 15:01:04 2025 GMT
Subject: CN=3a4da1f113fc498c38a0220bc87d47bb2bed1e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8b:58:f9:ab:00:7e:ff:67:15:2b:67:2c:56:
dc:3c:01:c6:23:3d:b2:67:b2:94:ea:38:e1:d7:98:
97:a9:75:6b:7b:77:76:ae:84:f1:f0:54:29:5b:99:
f4:ad:de:d8:b9:02:97:6e:06:e4:8c:58:13:c9:3b:
5e:93:93:8e:b5:f7:1c:db:d6:5e:1a:87:ab:8f:11:
77:74:f2:11:a6:ed:72:45:5f:3a:2f:fc:b2:59:85:
fc:16:7e:0e:ea:cc:53:3d:84:a6:9f:b6:2d:ae:78:
93:22:c4:d9:f6:3e:52:40:15:d8:ba:0d:20:8c:61:
9e:68:c8:9b:2a:71:8d:30:8e:02:cc:f4:40:4b:e4:
d3:ba:5d:9c:11:2b:23:3a:d3:71:e3:b0:06:c7:6e:
68:28:fc:f4:5d:03:67:b7:9b:e5:1f:28:68:7b:a4:
f0:11:3d:ce:c2:b1:65:fe:9e:2c:0d:45:a1:cf:06:
c2:fd:a1:80:a6:82:25:40:2b:8e:a2:0f:66:aa:71:
f7:64:54:d8:19:be:91:e1:5f:f0:cc:12:04:f5:b5:
09:af:ab:1d:d8:03:37:60:91:d6:22:e9:18:f6:78:
05:6e:f0:94:c0:12:75:42:f7:16:46:bb:39:8e:d4:
68:99:e3:90:3a:69:02:77:06:ab:04:e2:51:41:0c:
56:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:19:2F:D5:D9:A1:D6:88:AB:D0:9B:EF:13:9C:9F:E9:5D:9B:39:61
X509v3 Authority Key Identifier:
keyid:40:6A:7E:62:D1:E4:77:0F:E0:61:AA:9B:62:82:E8:F0:B3:69:01:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/463cab8887b80a1beafb23f455d7d8458c8c1c5a.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/3a4da1f113fc498c38a0220bc87d47bb2bed1e46.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/e134aa0d-3497-4e51-8a58-52ea83c81169/463cab8887b80a1beafb23f455d7d8458c8c1c5a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.141.20.0/24
192.141.22.0/23
IPv6:
2803:6020::/32
Signature Algorithm: sha256WithRSAEncryption
1e:7e:38:27:69:8f:13:5d:68:76:98:3c:02:24:b4:60:03:ec:
ff:ec:b7:b0:e4:10:d8:68:2f:cf:89:51:56:95:e3:d8:5e:f4:
dd:6b:e2:a4:25:2e:05:6e:f3:f5:69:76:c0:31:dd:de:30:79:
38:5b:70:d4:c4:d2:de:69:6c:9e:f9:a5:b9:bc:75:68:21:a0:
b9:73:af:b2:23:23:11:f5:c1:5e:d5:ab:96:4e:c9:bd:f4:fa:
ca:b6:15:06:da:c6:b1:8d:1b:4c:42:95:2e:de:0a:b2:84:45:
5a:68:0e:87:44:23:79:1a:27:2e:9e:39:4d:69:1b:66:2d:e0:
59:dd:b3:df:3c:29:ca:ab:db:99:a5:52:6b:04:91:c1:55:20:
8b:c1:23:00:70:f4:da:1b:2e:5c:53:f0:f9:37:58:ae:03:ec:
3a:1f:35:88:a5:5f:7f:62:51:7f:b4:42:fb:3d:c0:e8:bc:94:
d6:82:c3:96:ce:b7:d7:f4:72:16:d1:59:4f:83:df:14:65:60:
c6:7e:9a:32:02:b5:8f:ff:a7:39:11:6c:ac:d3:04:19:35:37:
91:dd:68:fc:ed:ad:bf:e6:d8:4b:29:d0:4d:58:c4:18:8b:1d:
29:be:a9:97:58:6e:15:41:e6:05:0a:3b:7a:c3:4c:35:93:a6:
67:43:32:6f
-----BEGIN CERTIFICATE-----
MIIFVTCCBD2gAwIBAgIDC+B9MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDQ2
M2NhYjg4ODdiODBhMWJlYWZiMjNmNDU1ZDdkODQ1OGM4YzFjNWEwHhcNMjMwOTI4
MTUwMTA0WhcNMjUwOTI5MTUwMTA0WjAzMTEwLwYDVQQDEygzYTRkYTFmMTEzZmM0
OThjMzhhMDIyMGJjODdkNDdiYjJiZWQxZTQ2MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAuItY+asAfv9nFStnLFbcPAHGIz2yZ7KU6jjh15iXqXVre3d2
roTx8FQpW5n0rd7YuQKXbgbkjFgTyTtek5OOtfcc29ZeGoerjxF3dPIRpu1yRV86
L/yyWYX8Fn4O6sxTPYSmn7YtrniTIsTZ9j5SQBXYug0gjGGeaMibKnGNMI4CzPRA
S+TTul2cESsjOtNx47AGx25oKPz0XQNnt5vlHyhoe6TwET3OwrFl/p4sDUWhzwbC
/aGApoIlQCuOog9mqnH3ZFTYGb6R4V/wzBIE9bUJr6sd2AM3YJHWIukY9ngFbvCU
wBJ1QvcWRrs5jtRomeOQOmkCdwarBOJRQQxWpwIDAQABo4ICcDCCAmwwHQYDVR0O
BBYEFDYZL9XZodaIq9Cb7xOcn+ldmzlhMB8GA1UdIwQYMBaAFEBqfmLR5HcP4GGq
m2KC6PCzaQFaMA4GA1UdDwEB/wQEAwIHgDCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy80OGYwODNiYi1mNjAzLTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvNDYzY2Fi
ODg4N2I4MGExYmVhZmIyM2Y0NTVkN2Q4NDU4YzhjMWM1YS5jZXIwgZoGCCsGAQUF
BwELBIGNMIGKMIGHBggrBgEFBQcwC4Z7cnN5bmM6Ly9yZXBvc2l0b3J5LmxhY25p
Yy5uZXQvcnBraS9sYWNuaWMvZTEzNGFhMGQtMzQ5Ny00ZTUxLThhNTgtNTJlYTgz
YzgxMTY5LzNhNGRhMWYxMTNmYzQ5OGMzOGEwMjIwYmM4N2Q0N2JiMmJlZDFlNDYu
cm9hMIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3JlcG9zaXRvcnkubGFj
bmljLm5ldC9ycGtpL2xhY25pYy9lMTM0YWEwZC0zNDk3LTRlNTEtOGE1OC01MmVh
ODNjODExNjkvNDYzY2FiODg4N2I4MGExYmVhZmIyM2Y0NTVkN2Q4NDU4YzhjMWM1
YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA0BggrBgEFBQcBBwEB/wQl
MCMwEgQCAAEwDAMEAMCNFAMEAcCNFjANBAIAAjAHAwUAKANgIDANBgkqhkiG9w0B
AQsFAAOCAQEAHn44J2mPE11odpg8AiS0YAPs/+y3sOQQ2Ggvz4lRVpXj2F703Wvi
pCUuBW7z9Wl2wDHd3jB5OFtw1MTS3mlsnvmlubx1aCGguXOvsiMjEfXBXtWrlk7J
vfT6yrYVBtrGsY0bTEKVLt4KsoRFWmgOh0QjeRonLp45TWkbZi3gWd2z3zwpyqvb
maVSawSRwVUgi8EjAHD02hsuXFPw+TdYrgPsOh81iKVff2JRf7RC+z3A6LyU1oLD
ls631/RyFtFZT4PfFGVgxn6aMgK1j/+nORFsrNMEGTU3kd1o/O2tv+bYSynQTVjE
GIsdKb6pl1huFUHmBQo7esNMNZOmZ0Mybw==
-----END CERTIFICATE-----
Generated at Tue Oct 3 16:22:56 2023 by rpki-client on console-ams.rpki-client.org